CVE-2016-1565

Cross-site scripting XSS vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute...

PT-2016-4862

Name of the Vulnerable Software and Affected Versions Drupal Field Group module version 7.x-1.x before 7.x-1.5 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an...